Authentication system embedded in electronic device

Abstract

To provide a method of authenticating a user of an electronic device, an electronic device, and a computer-readable medium.SOLUTION: An electronic device has a display 600 and a sensor 620. The display has a screen 602 for use in giving a user instructions to unlock the electronic device. The screen 602 has a block having an arrow indicating a user to unlock the electronic device by sliding a block 610 along a track 612 by putting a finger on the block to drag it along the track. The display has a sensor in the display along the track. The sensor is embedded in a display stack which can be equipped with a capacity detection device, a light source, and a display surface, for example.SELECTED DRAWING: Figure 6

Description

[Technical Field]

[0001] The present invention relates to electronic devices with built-in authentication systems. [Background technology]

[0002] Electronic devices, particularly portable electronic devices, are used to store personal information. For example, a user may use a mobile phone, PDA, smartphone, or other electronic device to store contacts, email, calendar information, documents, and other information used by the user. While this information does not necessarily need to be confidential, the user may desire to make at least some of the information unavailable to others. One way to prevent unauthorized persons from accessing and viewing a user's personal information is to require the user of the electronic device to provide a password or passcode before enabling device features or accessing device resources. For example, the electronic device may require the user to enter a four-digit or four-character PIN before displaying the device's home screen (e.g., springboard) or menu. As another example, an accessory device for detecting the user's fingerprint or scanning the user's retina may be connected to the device, requiring the user to first present an approved fingerprint or retina before receiving access to the device.

[0003] While both of these methods can be effective, restricting access based on a password or passcode is effective only as long as no other user knows the password or passcode. Once the password or passcode is known, the restriction mechanism can become ineffective. Also, a password or passcode may be forgotten, preventing authorized users from accessing the device. Furthermore, requiring a user to provide a fingerprint or undergo a retinal scan can be time-consuming and inconvenient for the user because it requires additional steps before the user can access the device. While this method is more secure than entering a password or passcode, it requires additional hardware (e.g., a required scanner, detector, or reader) and time. Therefore, it is desirable to provide electronic devices that implement biometric and other authentication mechanisms so that the device quickly and seamlessly authenticates the user, for example, when the user turns on, unlocks, or starts up the device. Summary of the Invention

[0004] A method, electronic device, and computer-readable medium are provided for authenticating a user of an electronic device. In some embodiments, the electronic device may seamlessly authenticate the user. The electronic device may receive input from the user, the input being provided by an input mechanism of the electronic device. The electronic device may detect identifying information when the user provides the input from one or more sensors integrated into or near the input mechanism. The electronic device may authenticate the user by comparing the detected identifying information to identifying information stored in a library of the device. For example, the sensor may include a sensor for detecting a feature on the user's skin or a subcutaneous feature of the user. The sensor may be integrated into at least one of a touchscreen, a button (e.g., a keyboard or mouse button), a device housing near the input mechanism (e.g., a laptop housing near the keyboard), or any other suitable location.

[0005] In some embodiments, the electronic device may determine that the user is aligned with the sensing element of the device without prompting the user to align with the sensing element of the device. For example, the sensing element may be positioned such that the sensing area of ​​the sensor includes the user's expected position when operating the electronic device. The sensor may use the sensing element to detect one or more biometric attributes of the user (e.g., facial or eye features). For example, the sensor may include a camera or optical sensor adjacent to the device's display. The user may then be authenticated by comparing the detected biometric attribute to a library of biometric attributes stored on or accessible by the electronic device.

[0006] In some embodiments, the electronic device may authenticate a user based on common attributes of options selected by the user. The electronic device may display several selectable options for selection by the user and may receive a user selection of a subset of the options. The electronic device may then identify one or more attributes common to some or all of the selected options. The attributes may include, for example, at least one of size, color, outline, shade pattern, shape, alignment with other options, position relative to other options, source of the option, or any other suitable attribute. The electronic device may then authenticate the user based on the identified attributes. For example, if a user selects all shapes that share an attribute associated with a particular user, the electronic device may authenticate the user.

[0007] In some embodiments, the electronic device may authenticate a user based on a pattern of inputs received by the device. The electronic device may include a sensor that detects multiple inputs provided by the user. For example, the sensor may include an input mechanism that receives the inputs provided by the user. As another example, the sensor may include an accelerometer or gyroscope that detects movement of or contact with the electronic device. The electronic device may be operative to identify a pattern of the detected inputs and compare the identified pattern to patterns stored in memory to authenticate the user. The pattern may include a temporal pattern (e.g., a pattern related to the delay between successive inputs), a visual pattern (e.g., a pattern related to attributes of several options selected by the user or to the inputs provided by the user), or a combination thereof. Upon authenticating the user, the electronic device may provide the user with access to restricted electronic device resources. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a schematic diagram illustrating an example of an electronic device for use with an authentication system according to an embodiment of the present invention. [Figure 2] 2 is a schematic diagram illustrating an example display screen of an electronic device, in accordance with one embodiment of the present invention. [Figure 3] FIG. 10 illustrates an example display screen for prompting a user to authenticate in accordance with one embodiment of the present invention. [Figure 4] 4 is a schematic diagram illustrating an example of a display screen for prompting a user to authenticate before the user can access device resources in accordance with one embodiment of the present invention. [Figure 5A] 10A-10C are schematic diagrams illustrating example display screens associated with different users that are provided in response to user authentication, according to an embodiment of the present invention. [Figure 5B] 10A-10C are schematic diagrams illustrating example display screens associated with different users that are provided in response to user authentication, according to an embodiment of the present invention. [Figure 5C] 10A-10C are schematic diagrams illustrating example display screens associated with different users that are provided in response to user authentication, according to an embodiment of the present invention. [Figure 6] 2 is a schematic diagram illustrating an example of a display of an electronic device for detecting a user's fingerprint, in accordance with one embodiment of the present invention. [Figure 7] 4 is a schematic diagram illustrating another example of an electronic device for detecting a user's fingerprint, in accordance with one embodiment of the present invention. [Figure 8A] 1 is a schematic diagram illustrating an example of an electronic device for detecting a user's handprint, in accordance with one embodiment of the present invention. [Figure 8B] 1 is a schematic diagram illustrating an example of an electronic device for detecting a user's handprint, in accordance with one embodiment of the present invention. [Figure 9] 1 is a schematic diagram illustrating an example of an electronic device for detecting a user's handprint, in accordance with one embodiment of the present invention. [Figure 10] 1 is a schematic diagram illustrating an example of a device having sensors for detecting features beneath a user's skin, in accordance with one embodiment of the present invention. [Figure 11] 1 is a schematic diagram illustrating an example of an electronic device having a sensor for detecting a user's facial features, in accordance with an embodiment of the present invention. [Figure 12] 1 is a schematic diagram illustrating an example of an electronic device having a sensor for detecting eye characteristics of a user, in accordance with an embodiment of the present invention. [Figure 13] FIG. 2 is a schematic diagram illustrating an example of a display for providing a visual pattern in accordance with one embodiment of the present invention. [Figure 14] FIG. 2 is a schematic diagram illustrating an example of a display for providing a visual pattern in accordance with one embodiment of the present invention. [Figure 15] 3 is a flow chart illustrating an example of a method for authenticating a user according to one embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0009] An electronic device is provided having an authentication system for restricting access to resources of the electronic device. For example, access to any suitable electronic device resource may be restricted, such as access to files or data stored on or available from the device. As another example, access to certain applications (e.g., applications purchased by a particular user or applications associated with administrative tasks or privileges) may be restricted. As yet another example, access to personalization settings (e.g., displayed options, background images, or icons used for applications) may be restricted until the user is authenticated.

[0010] Any suitable authentication system may be implemented. In some embodiments, the authentication system may include a system for detecting biometric characteristics or attributes of a user. For example, the electronic device may include a system that detects and authenticates a user based on a user's cutaneous or subcutaneous characteristics, such as a fingerprint, hand print, palm print, knuckle print, vascular pattern, or any other suitable portion of the user's cutaneous or subcutaneous area. As another example, the electronic device may include a system that detects and authenticates a user based on a user's ocular or facial characteristics or the user's eye (eye) movements. As yet another example, the electronic device may include a system that detects a user's ear canal characteristics, an odor associated with the user, the user's DNA, or any other suitable biometric attribute or information associated with the user.

[0011] In some embodiments, the authentication system may include a system that identifies a user based on a visual or temporal input pattern provided by the user. For example, an electronic device may display several selectable options or graphics that form a visual pattern. The user may select any suitable predetermined subset (part) of the displayed options for authentication. For example, the user may select one or more options that have a common predetermined attribute (e.g., size, color, shape, or outline). As another example, the user may select one or more options located in a predetermined area of ​​the display (e.g., regardless of the attribute of the selected option). The user may select options simultaneously, sequentially, or a combination thereof.

[0012] As another example, a user may provide a series of inputs at a particular pace or in a particular pattern. For example, a user may select options with a particular delay (e.g., a pause between two selections). Alternatively, a user may provide inputs that are detected by a device sensor (e.g., an accelerometer or gyroscope) according to a predetermined temporal pattern. The device may detect the inputs in any suitable manner, such as detecting the inputs from vibrations caused by tapping the device or an area adjacent to the device or by moving the device in a particular manner.

[0013] An electronic device may provide any suitable combination of authentication systems, such as, for example, a biometric authentication system and a pattern-based authentication system, several biometric authentication systems, or several pattern-based systems. In some embodiments, different authentication systems may be associated with different resources, such that a user may provide authentication information to several systems before ultimately accessing a particular restricted resource (e.g., private or personal information). The electronic device may use any suitable method to select which authentication systems to combine. For example, a user may associate several authentication systems with a particular resource, or the electronic device may automatically (e.g., as a default) assign a particular authentication system to a particular resource.

[0014] FIG. 1 is a schematic diagram illustrating an example of an electronic device for use with an authentication system according to an embodiment of the present invention. Electronic device 100 may include a processor 102, storage 104, memory 106, communications circuitry 108, input / output circuitry 110, an authentication system 112, and a power source 114. In some embodiments, one or more of the components of electronic device 100 may be combined or omitted (e.g., combining storage 104 and memory 106). In some embodiments, electronic device 100 may include other components (e.g., a display, bus, or input mechanism) that are not integrated with or included in the components shown in FIG. 1, or may include more than one of the components shown in FIG. 1. For simplicity, FIG. 1 illustrates only one of each component.

[0015] Processor 102 may comprise any processing circuitry that controls the operation and execution of electronic device 100. For example, processor 102 may be used to run operating system applications, firmware applications, media playback applications, media editing applications, or any other applications. In some embodiments, the processor may drive a display and process input received from a user interface.

[0016] Storage 104 may include one or more storage media, such as, for example, a hard drive, a solid-state drive, permanent memory such as flash memory, ROM, any other suitable type of storage element, or any combination thereof. Storage 104 may store, for example, media data (e.g., music and video files), application data (e.g., for implementing functionality in device 100), firmware, user preference information data (e.g., media playback settings), authentication information (e.g., a library of data associated with authorized users), lifestyle information data (e.g., food preferences), exercise information data (e.g., information obtained by an exercise monitoring device), transaction information data (e.g., information such as credit card information), wireless connection information data (e.g., information that may enable electronic device 100 to establish a wireless connection), subscription information data (e.g., information keeping track of podcasts, television programs, or other media to which a user subscribes), contact data (e.g., phone numbers and email addresses), calendar information data, and any other suitable data, or any combination thereof.

[0017] Memory 106 may include one or more different types of memory used to temporarily store data, such as cache memory, semi-permanent memory, such as RAM, and / or other memory types. In some embodiments, memory 106 may be used to store data used to operate electronic device applications or any other type of data that may be stored in storage 104. In some embodiments, memory 106 and storage 104 may be combined as a single storage medium.

[0018] The communications circuitry 108 may enable the device 100 to communicate with one or more servers or other devices using any suitable communications protocol. The electronic device 100 may include multiple communications circuitry 108 to simultaneously perform several communication operations using different communications networks, although only one is shown in FIG. 1 to avoid overcomplicating the diagram. For example, the communications circuitry 108 may support Wi-Fi (e.g., an 802.11 protocol), Ethernet, Bluetooth (a trademark of Bluetooth Sig), a radio frequency system, a cellular network (e.g., GSM, AMPS, GPRS, CDMA, EV-DO, EDGE, 3GSM, DECT, IS-136 / TDMA, iDen, LTE, or any other suitable cellular network or protocol), infrared, TCP / IP (e.g., any of the protocols used at each layer of the TCP / IP layer), HTTP, BitTorrent, FTP, RTP, RTSP, SSH, Voice over IP (VOIP), any other communications protocol, or any combination thereof.

[0019] The input / output circuitry 110 may operate to convert (and encode / decode, if necessary) analog and other signals into digital data. In some embodiments, the input / output circuitry may convert digital data into any other type of signal, or vice versa. For example, the input / output circuitry 110 may receive and convert physical touch input (e.g., from a multi-touch screen), physical movement (e.g., from a mouse or sensor), analog audio signals (e.g., from a microphone), or any other input. Digital data may be provided to and received from the processor 102, storage 104, memory 106, or any other component of the electronic device 100. Although the input / output circuitry 110 is shown in FIG. 1 as a single component of the electronic device 100, the electronic device 100 may include multiple input / output circuits.

[0020] Electronic device 100 may include any suitable mechanism or component that allows a user to provide input to input / output circuitry 110. For example, electronic device 100 may include any suitable input mechanism, such as, for example, buttons, a keypad, a dial, a click wheel, or a touch screen. In some embodiments, electronic device 100 may include a capacitive sensing mechanism or a multi-touch capacitive sensing mechanism. Some sensing mechanisms are described in commonly-owned U.S. patent application Ser. No. 10 / 902,964, entitled "Gestures for Touch Sensitive Input Device," filed July 10, 2004, and U.S. patent application Ser. No. 11 / 028,590, entitled "Mode-Based Graphical User Interfaces for Touch Sensitive Input Device," filed January 18, 2005, both of which are incorporated herein in their entireties.

[0021] In some embodiments, electronic device 100 may include dedicated output circuitry associated with output devices, such as, for example, one or more audio outputs. The audio outputs may include one or more speakers (e.g., mono or stereo speakers) built into electronic device 100 or audio components remotely connected to electronic device 100 (e.g., a headset, headphones, or earphones that may be connected to a communication device via a wire or wirelessly).

[0022] In some embodiments, I / O circuitry 110 may include display circuitry (e.g., a screen or projection system) that provides a visual display to a user. For example, display circuitry may include a screen (e.g., an LCD screen) integrated into electronic device 100. As another example, display circuitry may include a movable display or a projection system (e.g., a video projector) for providing a display of content on a surface remote from electronic device 100. In some embodiments, display circuitry may include a coder / decoder (codec) for converting digital media data to an analog signal. For example, display circuitry (or other suitable circuitry within electronic device 100) may include a video codec, an audio codec, or any other suitable type of codec.

[0023] The display circuitry may also include display driver circuitry, circuitry for driving a display driver, or both. The display circuitry may operate under direction of the processor 102 to display content (e.g., media playback information, application screens for applications implemented on the electronic device, information about ongoing communication operations, information about incoming communication requests, or device operation screens).

[0024] The authentication system 112 may comprise any suitable system or sensor that receives or detects input that identifies a user of the device 100. For example, the authentication system 112 may comprise a mechanism that detects skin patterns, an optical system that identifies a user based on the user's facial patterns, eye features (e.g., retina), or vein patterns, or any other sensor that detects any other user-specific biometric feature or attribute. As another example, the authentication system 112 may operate to receive secret or confidential input that identifies a user (e.g., a gesture on the device or touching an object or color on the display in a specific pattern, etc.). As yet another example, the authentication system 112 may operate to detect specific movements or vibrations of the device by the user. The authentication system 112 may be integrated into or built into any other component of the electronic device 112 (e.g., a display or camera) or may utilize events detected by various sensors of the electronic device (e.g., an accelerometer or proximity sensor). In some embodiments, multiple types of authentication systems may be incorporated into or implemented in the electronic device.

[0025] In some embodiments, electronic device 100 may include a control processor 102, storage 104, memory 106, communication circuitry 108, input / output circuitry 110, authentication system 112, and a bus that provides a data transfer path for communicating data to and from any other components included in the electronic device.

[0026] To prevent unauthorized access to data or information stored in memory or storage, the electronic device may instruct an authentication system to identify the user and grant access to the requested resource. The electronic device may require authentication before providing access to any electronic device resource. In some embodiments, the electronic device may require different levels of authentication before providing access to different applications or different data or files associated with different applications. For example, the electronic device may require the user to satisfy several authentication systems before providing access to applications or data (e.g., a first or initial authentication such as a passcode plus a second authentication such as using biometrics to unlock the device).

[0027] FIG. 2 is a schematic diagram illustrating an example display screen of an electronic device in accordance with one embodiment of the present invention. Display screen 200 may be displayed in response to a user unlocking the electronic device. Display screen 200 may include selectable options 210 for accessing various device functions. For example, each option 210 may be associated with a different application available on the electronic device. As another example, each option may be associated with particular data or files available to the user. The electronic device may or may not require authentication to access display 200. For example, display 200 may include basic or default applications available to the user. As another example, display 200 may include default functionality available to all users.

[0028] In some embodiments, one or more applications may provide access to or utilize personal data or resources of one or more users. For example, options 212 and 214 associated with phone and email applications, respectively, may include personal accounts or contacts that are not associated with all users of the electronic device. Before providing access to such applications or to personal or confidential features or resources available through such applications, the electronic device may require the user to authenticate. In some embodiments, default features of an application may be available without authentication (e.g., all users can make phone calls but cannot access the contact list).

[0029] 3 illustrates an example display screen for prompting a user to authenticate in accordance with one embodiment of the present invention. Display screen 300 may be displayed in response to receiving a command from a user to access a resource (e.g., information or an application) restricted by an authentication protocol. Display screen 300 may include information 310 associated with the selected resource. Prior to authentication, information 310 may be obscured or hidden from view (e.g., entries in certain fields may be unretrievable) to prevent unauthorized users from viewing the resource. In some embodiments, display screen 300 may not include any information until the user is authenticated.

[0030] Display screen 300 may include a notification 320 instructing the user to authenticate before accessing the requested resource. Notification 320 may include a pop-up, an overlay, a new display screen, or any other suitable type of display for providing instructions to the user. Notification 320 may include any suitable instructions, such as how the user should authenticate (e.g., instructions specifying a particular authentication system to use). For example, notification 320 may instruct the user to provide a fingerprint or input that matches a predetermined visual or temporal pattern. Once the user is properly authenticated, the electronic device may display information 310 for the user to identify and enable selectable options or other functionality associated with the selected resource.

[0031] In some embodiments, a user may be required to authenticate before unlocking an electronic device (e.g., before accessing any resources of the device). FIG. 4 is a schematic diagram illustrating an example of a display screen for prompting a user to authenticate before accessing device resources in accordance with one embodiment of the present invention. Display screen 400 may include options 410 for unlocking the display. For example, options 410 may include a slider that is dragged across a portion of the screen. As another example, options 410 may include an option or series of options that a user must select (e.g., by pressing several keys simultaneously or sequentially, touching several areas of display screen 400, etc.).

[0032] Display screen 400 may include a notification 420 instructing the user to authenticate before accessing device resources (e.g., a home screen that launches information and applications). Notification 420 may include any suitable type of notification, such as, for example, a pop-up, an overlay, a new display screen, or any other suitable type of display for providing instructions to the user. The electronic device may display notification 420 at any suitable time, such as, for example, when the user turns on the device (e.g., when they subsequently view display screen 400), in response to the user attempting to access device resources without first authenticating (e.g., as an error message), in response to a request for help by the user, or any other suitable time. Notification 420 may include any suitable instructions, such as, for example, how the user must authenticate, a list of authorized users, or any other suitable information.

[0033] Once a user is properly authenticated, the electronic device may display options associated with the authenticated user (e.g., options for applications purchased by the particular user). In some embodiments, the electronic device may provide access to resources or content that were previously unavailable (e.g., a contact list or previous messages in a phone or email application, etc.). FIGS. 5A-C are schematic diagrams illustrating example display screens associated with different users provided in response to user authentication in accordance with an embodiment of the present invention. Display screen 500A may include several options 510A. The displayed options may include several options common to a default or basic display of the electronic device (e.g., display screen 500A shares options with display screen 200 of FIG. 2). Display screen 500A may include several options 512A for additional applications or resources available only to the particular authenticated user. For example, display screen 510A may include additional options 512A for games, system, and media applications.

[0034] Display screen 500B may include options 510B for resources or applications available to the user. In some embodiments, options 510B may be completely different from the options on the default screen (e.g., display screen 500B does not share options with display screen 200 of FIG. 2). Display screen 500B may further be customized to not include a label identifying the application or resource associated with option 510B.

[0035] Display screen 500C may include options 510C for resources or applications available to the user. In some embodiments, options 510C for the same resource as in other display screens may have a different appearance (e.g., different icons). For example, in FIG. 5C, the options displayed for the Mail, Clock, Photos, YouTube, and Calculator applications may differ from the options displayed in display screen 500A of FIG. 5A. Display screen 500C may also include custom or personalized background 512C (e.g., a different background image). In some embodiments, display screen 500C may not include a dock or other feature for maintaining some options 510C in a fixed location (e.g., unlike options 510B located in dock 512B).

[0036] In some embodiments, the electronic device may provide access to different ranges of electronic device resources based on the identity of an authenticated user. For example, if an electronic device is utilized by multiple users (e.g., parents and children of the same family), the users may share some but not all resources (e.g., all users have access to the family's contact list, but not to other family members' emails). As another example, users of the electronic device may be organized into groups or hierarchies of users. Some resources may be associated with a group or hierarchy of users instead of or in addition to being associated with a particular user. Once a particular user is authenticated and identified as part of a group, the electronic device may provide that user with access to resources associated with that group (e.g., common or shared contacts, shared communications, or shared documents) and resources associated with the particular user (e.g., personal contacts, email accounts, and call lists).

[0037] The electronic device may associate a particular resource with one or more authentication systems. For example, a user may identify a resource and provide protection or security instructions (e.g., by selecting an appropriate option). The user may further select one or more authentication systems to be satisfied before providing access to the resource. If the resource is not provided (e.g., not a default application or file that remains available to all users) or if the resource was created or purchased by the user, the electronic device may associate the selected resource with one or more selected authentication systems. Alternatively, if the user has sufficient privileges (e.g., is an administrator), any resource may be protected with one or more selected authentication systems.

[0038] An electronic device may not require a user to authenticate each time the user unlocks or operates the electronic device. In some embodiments, the electronic device may keep a user authenticated for a specific period of time. For example, once authenticated, the electronic device may allow the user to access restricted resources for 10 hours from the time the user was authenticated. As another example, the electronic device may retain a user's authentication for a specific period of time after receiving the user's last command or entering standby mode (e.g., retaining authentication for 30 minutes after input). The length of time the electronic device retains authentication information may be set by the device or the user and may be based on the specific type or resource protected by the authentication information (e.g., a longer authentication period may be required for access to games purchased by a particular user than for the user's personal contacts). Because the electronic device does not require authentication each time the user operates the device, power consumption may be conserved.

[0039] An electronic device may use any suitable type of authentication system to prevent unauthorized access to device resources. In some embodiments, the electronic device may include an authentication system based on a user's unique skin pattern. For example, the electronic device may include an authentication system that detects the user's fingerprint, handprint, palmprint, knuckleprint, or any other suitable print or skin feature that is unique to the user. The authentication system may include a sensor that detects the user's unique skin pattern or feature.

[0040] The sensor may include any suitable type of sensor for detecting features or patterns unique to the user's skin. For example, the sensor may include an optical scanner that detects features of the user's skin. The optical sensor may comprise a charge-coupled device or any other suitable array of light-receiving elements (e.g., diodes) that record light received by the sensor (e.g., charge-coupled device). For example, if the charge-coupled device comprises an array of light-receiving elements, the optical sensor may operate to record, for each light-receiving element of the array, a pixel representing the light received by the particular light-receiving element. The value of each pixel may reflect the distance from the sensor of a particular portion of the user's skin (e.g., a ridge or valley) associated with the pixel. The recorded pixels may form an image (e.g., an image of a particular portion of the user's skin) that the electronic device can compare to a library of images associated with authorized users.

[0041] As another example, the sensor may include a capacitive sensor that detects characteristics of a user's skin. The capacitive sensor may include one or more chips containing an array of cells, each cell may include at least two conductive plates separated by an insulating layer. The sensor may be connected to an inverting amplifier that varies the voltage between the at least two conductive plates of each cell of the chip. When a user's finger is placed on the cell array, the sensor may operate to distinguish between cells located under valleys (e.g., fingerprint valleys) and cells located under ridges (e.g., fingerprint ridges) based on differences in capacitance values ​​of each cell (e.g., cells under valleys have lower capacitance values ​​than cells under ridges). Using the capacitance values ​​detected at each cell of the chip, the sensor may generate an image or representation of the skin placed on the sensor that can be compared to a library of images or representations available to the electronic device.

[0042] The authentication system may include any suitable countermeasure to prevent unauthorized users from imitating the skin pattern of an authorized user, for example, by placing an image (e.g., a printed image) or a three-dimensional structure (e.g., a polymer casting) in close proximity to the authentication system's sensors. For example, the authentication system may include a combination of optical and capacitive sensors, sonar or radio frequency sensors, sensors that detect the user's pulse, thermal sensors that determine the temperature of an object touching the sensor (e.g., to determine whether the temperature is within an expected range of human skin temperature), or any other suitable countermeasure.

[0043] The sensor may operate to detect a user's skin characteristics using any suitable method. In some embodiments, the sensor may operate to detect a user's skin characteristics as the user's skin is moved over the sensor. For example, the sensor may include a one-dimensional or stagnant sensor (e.g., a row of sensing elements) that detects a user's finger characteristics as the user's finger slides or rotates over the sensor. The sensor may have a direction in which the user's skin should be moved to provide an accurate representation of the user's skin characteristics. For example, the sensor may require the user to move their fingertip along the axis of the finger or orthogonal to the axis of the finger.

[0044] In some embodiments, the sensor may operate to detect characteristics of a user's skin when the skin is held stationary over the sensor. For example, the sensor may include a two-dimensional or moving sensor that detects characteristics of a user's finger when the finger is stationary over the sensor. The sensor may operate to move at a regular pace or speed under a stationary user's finger, or it may operate to detect an instantaneous or near-instantaneous two-dimensional representation of the user's finger at a point in time (e.g., with the user's finger moving over the sensor). Because two-dimensional sensors, unlike one-dimensional sensors, do not rely on the user moving the skin over the sensor at a regular or uniform pace, the use of two-dimensional sensors may provide a more accurate representation of a user's skin characteristics.

[0045] The sensor may be located in any suitable location within the electronic device. In some embodiments, the sensor may be positioned so that it is operable to detect an appropriate portion of a user's skin when the user operates or begins to operate the electronic device. The location of the sensor may vary depending on the portion of the user's skin (e.g., a finger, a hand, or a palm) to be detected. FIG. 6 is a schematic diagram illustrating an example display of an electronic device for detecting a user's fingerprint, according to one embodiment of the present invention. Display 600 may include a screen 602 that instructs a user to unlock the electronic device. For example, screen 602 may include a block 610 with an arrow that instructs a user to slide block 610 along track 612 to unlock the electronic device by placing a finger on block 610 and dragging the finger along track 612.

[0046] To authenticate a user during the unlocking process, display 600 may include a sensor 620 within the display along track 612. For example, sensor 620 may be integrated into the display stack (e.g., the display stack may include capacitive sensing elements, a light source, and a display surface). As another example, sensor 620 may be disposed below the display stack. As yet another example, sensor 620 may include an existing component of the display stack (e.g., the display stack of a touchscreen display may include capacitive sensors). In such an example, the authentication system may use the detection output of a capacitive sensing element in the display stack (e.g., of a touchscreen display) that has sufficient resolution to distinguish between ridges and valleys on the user's skin. In some embodiments, the capacitive sensing elements in the display stack may include several types or densities of capacitive sensing elements to enable authentication using specific portions of the display (e.g., using very fine sensing elements for authentication in the display stack along at least a portion of track 612 and less fine sensing elements in the remaining area of ​​display 600).

[0047] In some embodiments, sensor 620 may be embedded in the electronic device so that it is not visible within display 600. For example, sensor 620 may be fabricated, printed, or etched directly onto display 600 (e.g., etched onto glass) so that the user cannot see the fingerprint scanner. If the user has difficulty providing a proper fingerprint on sensor 620, display 600 may highlight the outline of sensor 620 to aid the user in authentication (e.g., by displaying an icon instructing the user to place their finger over the icon located over sensor 620, etc.).

[0048] 7 is a schematic diagram illustrating another example of an electronic device for detecting a user's fingerprint, in accordance with one embodiment of the present invention. Electronic device 700 may include input mechanisms 710 and 712 that a user may actuate to provide input to electronic device 700. For example, input mechanism 710 may include a keyboard, and input mechanism 712 may include a touchpad or trackpad. However, it should be understood that any other input mechanism may be used with electronic device 700, such as an input mechanism remotely connected to electronic device 700 (e.g., a wired or wireless mouse).

[0049] To provide secure access to resources, electronic device 700 may include at least one sensor 720 that detects features of a user's fingerprint to identify the user. To provide a seamless user experience, sensor 720 may be integrated into or beneath at least one of input mechanisms 710 and 712. In some embodiments, input mechanism 710 may include multiple separate keys that a user may press to provide input to electronic device 700, and thus may include sensor 720 integrated into one or more keys. For example, an optical or capacitive sensor may be positioned on the top surface of a key so that when a user places a finger on the key (e.g., the user places their index finger on the "F" or "J" key), the sensor can detect features of the user's fingertip to authenticate the user. A two-dimensional or motion sensor may be used to authenticate the user while their finger is resting on the key.

[0050] Sensor 720 may be located in, near, or behind any button or other physical input that a user may press on an electronic device. For example, sensor 720 may be located behind the home button (e.g., button 812 in FIG. 8B ) on a portable media player or cell phone. Sensor 720 may be located between an external cover or surface (e.g., a glass or plastic surface) and a mechanical component that acts on a switch or electronic circuit. For example, a fingerprint sensing mechanism may be incorporated under a transparent surface through which the sensing mechanism can detect the ridges and valleys of a user's fingerprint. In some embodiments, the addition of a transparent surface may not be necessary (e.g., if the sensing mechanism includes a surface on which a user can place their finger).

[0051] In some embodiments, input mechanism 712 may include sensors 720 integrated under part or all of the pad, such that when a user places a finger on input mechanism 712 (e.g., to move an indicator on display 715), sensors 720 can detect features of the user's finger to authenticate the user. Sensors 720 may be one-dimensional sensors that authenticate the user as the user moves their finger across the pad, or two-dimensional sensors that authenticate the user when their finger rests on the pad (e.g., when the user initially places their finger on the pad). Sensors 720 may cover the entire surface of input mechanism 712, such that the user does not need to place their finger on a specific portion of input mechanism 712 for authentication. Electronic device 700 may operate to identify the location of each sensor 720, for example, using highlighting, an indication on the display, or any other suitable method, to assist the user in providing a sufficiently detectable input. In some embodiments, any other suitable input mechanism (eg, a button, wheel, key, or screen) may be equipped with a sensor 720 that seamlessly detects the user's fingerprint characteristics.

[0052] 8A and 8B are schematic diagrams illustrating an example of an electronic device for detecting a user's handprint, in accordance with an embodiment of the present invention. The electronic device 800 may include a housing 802 that holds a display 810. The housing 802 may substantially form the back surface of the electronic device 800 (e.g., the surface on the side without the display 810) to protect the components of the electronic device. When a user holds the electronic device 800, the user's hand 830 may be concave around the housing 802 so that the display 810 is visible, as shown in FIG. 8B, with at least the user's palm 832 positioned to touch the back surface 804. The electronic device 800 may include a sensor 820 integrated into the back surface 804 to detect characteristics of the user's palm or hand. By placing the sensor 820 on the back surface 802 (or any surface of the electronic device opposite the surface of the display 810), the sensor 820 can authenticate the user when the user holds the electronic device 800. The sensor 820 may comprise a two-dimensional sensor, allowing the electronic device 800 to seamlessly authenticate a user without requiring the user to touch the back surface 804 and move or slide their hand.

[0053] FIG. 9 is a schematic diagram illustrating an example of an electronic device for detecting a user's handprint, in accordance with an embodiment of the present invention. Electronic device 900 may include an input mechanism 910 through which a user provides input to the device. Input mechanism 910 may be positioned such that when a user's fingers are placed on input mechanism 910, the user's palm and wrist rest on or extend above housing 912. Electronic device 900 may include one or more sensors 920 integrated into or disposed on housing 912 to authenticate a user of the device. Sensor 920 may be positioned such that when a user places their hand on housing 912 to operate input mechanism 910, the user's hand, palm, or wrist is aligned with sensor 920. Sensor 920 may operate to detect a user's skin characteristics when the user's hand is placed on housing 912, for example, using a two-dimensional sensor.

[0054] In some embodiments, the authentication system may alternatively or additionally include a sensing mechanism that detects features under the user's skin. For example, the authentication system may include a sensor that detects the distribution pattern of the user's veins, arteries, hair follicles, or any other suitable detectable features under the user's skin. The sensor may include any suitable type of sensor, such as, for example, an optical sensor (e.g., a camera) disposed on the surface of the electronic device. The sensor may be positioned to detect features under any suitable portion of the user's skin while the electronic device is in use. For example, the sensor may be positioned to detect features under the skin of the user's finger, hand, wrist, arm, face, or any other suitable area.

[0055] FIG. 10 is a schematic diagram illustrating an example of a device having a sensor for detecting features under a user's skin, in accordance with an embodiment of the present invention. The electronic device 1000 may include an input mechanism 1010 disposed on or extending across a portion of a housing 1012. The input mechanism 1010 may be configured such that, during use, a user's hand and wrist are positioned on the housing 1012 (e.g., rather than on the input mechanism 1010). The electronic device 1000 may include a sensor 1020 for detecting features under the user's skin. For example, the sensor 1020 may include an optical sensor that detects a user's vein pattern near the user's wrist. The sensor 1020 may be located on any suitable surface of the electronic device 1000, such as being disposed on or integrated into the housing 1012, such that the user's wrist may be in proximity to the sensor 1020 when the user positions their hand to provide input using the input mechanism 1010. Such an arrangement allows seamless user authentication by detecting features under the user's skin (e.g., vein patterns near the user's wrist) while the user operates device 1000.

[0056] In some embodiments, the authentication system may alternatively or additionally include a sensor that detects facial features of the user. For example, the authentication system may include a sensor that detects radiation emitted or reflected by one or more prominent features of the user's face when the user's face is positioned facing the sensor. The sensor may be operative to detect any suitable type of radiation. For example, the sensor may include an optical sensor (e.g., a camera), an infrared sensor, an ultraviolet sensor, a scanning laser, an ultrasonic sensor (e.g., a sonar), or any other suitable sensor that detects desired radiation (e.g., having a particular range of radiation frequency or period).

[0057] The authentication system may operate to detect any suitable element of a user's face. For example, the authentication system may identify a face by analyzing the relative position and size of the user's head, nose, mouth, ears, cheekbones, chin, or any other attribute of the user's face. As another example, the authentication system may identify a user's facial features using a three-dimensional authentication system to capture and analyze the curvature or depth of the user's facial features (e.g., eye sockets, chin, or nose contour). As yet another example, the authentication system may detect distinctive lines, patterns, or blemishes on the user's skin (e.g., using skin texture analysis). These methods may be used in combination to improve or facilitate authentication.

[0058] The sensor for detecting a user's facial features may be located in any suitable location on the electronic device. In some embodiments, the sensor may include a camera or other sensor provided on the electronic device for another purpose (e.g., a built-in webcam for chat). FIG. 11 is a schematic diagram illustrating an example of an electronic device having a sensor for detecting a user's facial features in accordance with an embodiment of the present invention. The electronic device 1100 may include a sensor 1120 positioned adjacent to the display 1110 such that when the user turns toward the display 1110 to view or access electronic device resources, the user's face and features of interest on the user's face may be aligned with (e.g., within) the field of view of the sensor 1120. In response to detecting the user's face facing the sensor 1120, the electronic device 1100 may instruct the sensor 1120 to capture and analyze the user's facial features and compare the analyzed features to a library of features associated with authorized users. If an authorized user is detected, the electronic device 1100 may display or provide access to restricted content 1112 on the display 1110.

[0059] In some embodiments, the authentication system may alternatively or additionally include a sensor that authenticates a user based on attributes of the user's eyes. For example, the sensor may operate to scan the user's retina, iris, or retinal blood vessels to detect a pattern unique to the user. The sensor may include a light source that emits light (e.g., infrared light) that is reflected by the user's eye and detected by a lens or optical sensor. The sensor analyzes the received light to create a representation of the user's eye that can be compared to a library of eyes of authorized users.

[0060] As another example, the sensor may alternatively or additionally operate to detect a user's eye movements, for example, by tracking the position and movement of the user's retina, iris, blood vessels, or any other feature of the user's eye. Before providing a user with access to electronic device resources, the electronic device may instruct the sensor to detect predetermined eye movements established by authorized users. For example, each authorized user may create a stream of eye movements by looking at the sensor and moving their eyes in a particular manner (e.g., up, down, left, right, blink, blink, etc.). If the device user moves their eyes in a manner consistent with the predetermined eye movement, the electronic device may unlock the device or provide access to restricted resources.

[0061] The sensor may be located in any suitable location on the device, such as, for example, adjacent to a display or other portion of the device that faces the user's eyes (e.g., a location similar to sensor 1120 of FIG. 11 that can be used to authenticate a user from their eye characteristics). FIG. 12 is a schematic diagram illustrating an example of an electronic device having a sensor for detecting a user's eye characteristics in accordance with an embodiment of the present invention. Electronic device 1200 may include sensor 1220 located adjacent to display 1210 such that the user's eyes may be aligned with sensor 1220 (e.g., within the field of view of sensor 1220) when the user turns toward display 1210 to view or access electronic device resources. Using sensor 1220, electronic device 1200 may detect the user's eye characteristics or movements to authenticate the user and provide access to restricted device resources. In some embodiments, sensor 1220 may be implemented to authenticate a user based on the user's facial characteristics (e.g., like sensor 1120 of FIG. 11).

[0062] In some embodiments, the authentication system may operate to authenticate a user based on voice attributes or qualities. For example, the authentication system may operate to detect a particular voice pitch or voiceprint. The authentication system may rely on a string of characters (e.g., the user must say a particular phrase for authentication, such as "my voice is my password") or may not rely on a string of characters (e.g., any suitable words may be said to authenticate the user). In some embodiments, the authentication system may require the user to say a secret password for authentication, thereby requiring both knowledge of the user's password and possession of the user's voice pitch for proper authentication. The authentication system may include any suitable component for authenticating a user, such as, for example, a microphone. In some embodiments, the microphone may be primarily used for other purposes (e.g., telephony or video conferencing).

[0063] In some embodiments, other types of authentication systems may be used. In some embodiments, the authentication system may operate to identify and authenticate a user based on the shape of the ear canal. For example, the authentication system may include a sensor (e.g., an optical sensor, radar, or sonar) that detects characteristic features (e.g., shape and length) of the user's ear canal. For example, the sensor may be located near the speaker of the device (e.g., if the device is a phone). In some embodiments, the authentication system may operate to identify a user based on an odor characteristic of the user. For example, the authentication system may include a sensor that detects odor-specific attributes of the user's skin or sweat glands. The sensor may be located in any suitable location on the device, such as at or near an input device (e.g., where the user touches the device).

[0064] In some embodiments, the authentication system may operate to identify a user based on a DNA sequence. For example, the authentication system may include a sensor connected to a processor that obtains cells bearing the user's DNA (e.g., from the user's skin or mouth) and determines whether a particular DNA sequence is present. The length or mutation of the DNA sequence may be selected to allow the authentication process to be performed quickly enough (e.g., without the need to analyze the entire DNA strand) while still providing proper authentication. The sensor may be located in any suitable location on the device, such as on or near an input mechanism or other component that the user may touch.

[0065] An electronic device may acquire biometric information reflecting an authorized user using any suitable method. For example, when a user selects an authentication system to use for a particular device resource, the electronic device may prompt the user to provide biometric information (e.g., a fingerprint, eye scan, or DNA sequence) to be stored in a library. The electronic device may prompt the user to provide biometric input using any suitable method, such as using visual cues, auditory cues, and highlighting or identifying the location of an authentication system sensor. The acquired biometric information stored in the library may be retrieved when the user attempts authentication and compared to the biometric information provided by the user. If the provided biometric information matches information stored in the library (e.g., information associated with the requested resource), the electronic device may provide access to the restricted resource. In some embodiments, similar methods may be used to receive non-biometric information.

[0066] In some embodiments, the authentication system may alternatively or additionally not require biometric parameters to provide a user with access to electronic device resources. Non-biometric authentication systems can be more easily compromised than biometric authentication systems, but some can be highly effective and secure. In some embodiments, the authentication system may provide access to electronic device resources in response to detecting that a key or token is within a certain distance from the electronic device. For example, a user may have a mobile phone and a computer. One or both devices may be equipped with circuitry to detect when the devices are within a certain range of each other (e.g., a 5-foot range so that a user can be authenticated when sitting at a desk to use a computer with their mobile phone in their pocket). If the devices are determined to be in close proximity to each other, resources on one or both devices may be made available. This method is particularly effective for protecting access to stationary devices while taking advantage of the fact that users can continue to carry their mobile devices. Details of this and other embodiments are described in commonly-assigned, co-pending U.S. patent application Ser. No. 11 / 823,656, filed Jun. 27, 2007 (Attorney Docket No. 104677-0059-101, P4884US1).

[0067] In some embodiments, the electronic device may authenticate a user based on a particular series of inputs provided by the user. For example, the electronic device may request the user to provide inputs that correspond to visual patterns provided by the electronic device. FIGS. 13 and 14 are schematic diagrams illustrating example displays for providing visual patterns in accordance with one embodiment of the present invention. Display 1300 may include a distribution 1310 of options or shapes 1312. Display 1400 may include a distribution 1410 of options or shapes 1412. Each of the shapes 1312 and 1412 may have a different shading pattern (e.g., different line directions), a single or multiple colors, a shape or outline, a size (e.g., perimeter or area), a proximity or relative position to other displayed shapes, an alignment with other shapes (e.g., selecting four yellow shapes to form a straight line), a source (e.g., shapes representing photos from a particular album or library), or any other suitable characteristic. Distribution 1310 or 1410 may include any suitable number and distribution of figures, such as, for example, a number of uniformly distributed figures (e.g., 20 uniformly distributed figures 1310) or a seemingly irregularly distributed figure (e.g., randomly distributed figures 1410).

[0068] To perform authentication, the user may select any suitable subset of the displayed shapes or options (e.g., as detected by an input mechanism or other sensor). The subset may include some or all shapes that share one or more attributes. For example, the user may select some or all shapes that are a particular color (e.g., all shapes that contain the color yellow). As another example, the user may select some or all shapes that have the same outline (e.g., all squares). As yet another example, the user may select some or all shapes that have a particular attribute in common (e.g., all shapes with five sides, or all shapes that represent photos associated with a particular album stored on the device). As yet another example, the user may select some or all shapes that contain a particular distribution of colors (e.g., shapes that contain a red portion adjacent to a blue portion). Any suitable criteria or attributes may be used to select a particular subset of the displayed shapes (including combinations of the above examples, such as selecting the top two blue shapes and the bottom two squares).

[0069] Any suitable number of shapes or options may be associated with the subset to be selected for authentication. For example, the number of such shapes may be related to the total number of shapes displayed (e.g., selecting 20% ​​of the displayed shapes). As another example, the number of such shapes may be a fixed number, such as 5 or less (e.g., so that a user can select all shapes simultaneously with one hand) or 10 or less (e.g., so that a user can select all shapes simultaneously with both hands). The number of such shapes may be selected to optimize security (e.g., requiring a sufficient number of shapes so that it is not easy to guess which shape to select).

[0070] The user may select the shapes to be included in the subset using any suitable method. If a multi-touch display is provided, the authentication system may require the user to simultaneously select all of the shapes to be used for authentication. As another example, the authentication system may allow the user to sequentially select the shapes to be used for authentication. The shapes may be selected in any or a specific order (e.g., top to bottom or left to right). As yet another example, the authentication system may require the user to select only the shapes of the permitted subset in a single stroke (e.g., by dragging a finger across the display). Any other suitable method for selecting shapes to be included in the subset may be used.

[0071] To avoid having the user always select shapes displayed in the same relative positions on the display (e.g., as when entering a numeric passcode using a displayed keypad), the electronic device may vary the distribution of shapes to be selected for authentication. The user may then identify shapes that share attributes associated with the authentication protocol to authenticate. Because the positions of the shapes used for authentication may change each time the user accesses a device resource, someone looking over the user's shoulder at the overall distribution of selected shapes will not be able to select shapes in the same distribution for authentication (e.g., striped shapes may not be distributed in the same area of ​​the device).

[0072] To prevent unauthorized users from guessing the appropriate graphic subset, the electronic device may change the distribution of displayed graphics or vary the graphics (e.g., using a different color or outline) after failed attempts to select a graphic for authentication. The electronic device may lock the device after a certain number of failed attempts to select the appropriate graphic subset. Once locked, the user may need to connect the device to a host (e.g., connecting a portable device to a stationary device) to re-enable the device, or may need to use another authentication system (e.g., a biometric system) to re-enable the device.

[0073] In some embodiments, rather than selecting a specific shape, a user may simply select a shape located at a predetermined portion of the screen. For example, a user may place one or more fingers on several shape locations, regardless of the actual displayed shape. As another example, a user may place one or more fingers on a specific shape displayed on the electronic device and move the one or more fingers in a predetermined manner (e.g., slide the one or more fingers) regardless of the displayed shape. As yet another example, a user may sequentially select several shapes located at predetermined positions on the display (e.g., select shapes at specific positions to form a predetermined pattern, etc.). In some embodiments, an electronic device may provide a blank or solid display screen on which a user may draw one or more patterns using one or more fingers. Such a method may confuse or distract unauthorized users by visually attracting them with the displayed shapes.

[0074] In some embodiments, the electronic device may alternatively or additionally authenticate a user based on a temporal pattern of input received from the user. For example, the user may provide a specific number of inputs at a specific rate for authentication. The electronic device may detect the input using any suitable method. For example, the electronic device may detect input provided using the device's input mechanism (e.g., input received by a touchscreen). As another example, the electronic device may detect input from movement, contact, vibration, or other impact detected by an appropriate sensor (e.g., an accelerometer) on the device. In such a method, the user may tap on any part of the device (or an object in contact with the device, such as a table on which the device is placed), and the device's sensors detect the taps and determine whether they correspond to an allowed temporal pattern. As yet another example, the electronic device may use the device's sensors (e.g., an accelerometer or gyroscope) to detect that it has been moved in a specific manner (e.g., shaking twice followed by a rotation). In response to detecting the precise temporal pattern, the electronic device may provide access to restricted resources.

[0075] In some embodiments, the authentication system may combine temporal and visual patterns for authentication. For example, the user may be required to select specific displayed shapes at a certain speed (e.g., quickly select the first two shapes, then pause and then simultaneously select the last two). As another example, the user may be required to first select the appropriate shapes and then provide a temporal pattern input. As yet another example, the user may be required to select one or more shapes and then move the device (e.g., shake the device). Any other suitable combination of inputs may be required for authentication.

[0076] An electronic device may configure visual or temporal patterns for authorized users using any suitable method. In some embodiments, if a user selects to use a temporal or visual pattern to restrict access to a particular device resource, the electronic device may prompt the user to provide or select a temporal or visual pattern. For example, the electronic device may provide a list of geometric attributes (e.g., color or outline) from which the user can select to form a pattern. As another example, the electronic device may prompt the user to select a displayed geometric shape or provide a temporal pattern, and then extract or identify the pattern from the received input. The electronic device may prompt the user to provide the pattern multiple times before accepting it to ensure that the user intended to do so and that they remember the selected pattern.

[0077] An electronic device may include any suitable number and type of authentication systems. For example, an electronic device may include one, more than one, or all of the authentication systems or methods described above. Access to various resources may be restricted using one or more authentication systems, and the authentication system used may be selected or configured by the user. In some embodiments, multiple authentication systems may be used sequentially before access to a particular restricted resource is provided.

[0078] FIG. 15 is a flowchart illustrating an example method for authenticating a user, according to one embodiment of the present invention. Process 1500 begins at step 1502. At step 1504, the electronic device may identify a user of the device. For example, the electronic device may receive a username or password associated with the user. As another example, the electronic device may receive authentication information using an authentication system and identify the user from the received authentication system. The electronic device may automatically receive authentication information without requiring explicit input from the user, for example, by positioning a sensor of the authentication system such that the authentication information is seamlessly acquired as the user operates the device. As another example, the sensor may operate to detect a characteristic attribute of the user as soon as the user enters the sensor's field of view, i.e., detection area. In some embodiments, process 1500 may transition directly from step 1502 to step 1506.

[0079] At step 1506, the electronic device may determine whether a request to access a restricted resource has been received. For example, the electronic device may determine whether a user has provided instructions to access data associated with a particular user (e.g., a contact list or other personal information). As another example, the electronic device may determine whether a user has provided instructions to access a restricted application (e.g., an application restricted to a particular tier of users, such as an administrator, or an application purchased by a particular user). If the electronic device determines that an instruction to access a restricted resource has not been received, process 1500 may return to step 1506 and continue monitoring input received from the user.

[0080] On the other hand, if the electronic device determines at step 1506 that it has received a command to access a restricted resource, process 1500 may proceed to step 1508. At step 1508, the electronic device may determine whether the identified user is authorized to access the resource. For example, the electronic device may determine whether the user has provided appropriate authentication information to access the restricted resource. The electronic device may obtain appropriate authentication information without the user's knowledge, for example, by incorporating an authentication sensor into the device so that authentication information can be obtained during normal use. If the electronic device determines that the identified user is not authorized, process 1500 may proceed to step 1510. At step 1510, the electronic device may prompt the user to perform authentication. For example, the electronic device may prompt the user to provide authentication information to an authentication system (e.g., one of the authentication systems described above). In some embodiments, the electronic device may detect multiple inputs by the user and determine whether the inputs have a pattern associated with the authorized user or share attributes associated with the authorized user (e.g., determine whether the user provided appropriate inputs that correspond to the attributes or patterns of the authorized user, or determine whether the attributes or patterns of the inputs match the attributes or patterns associated with the authorized user). Process 1500 may then return to step 1508, which determines whether the user provided appropriate authentication information.

[0081] On the other hand, if the electronic device determines at step 1508 that the user is authorized, process 1500 may proceed to step 1512. At step 1512, the electronic device may provide the user with access to the requested restricted resource. For example, the electronic device may provide the user with access to personal data or access to applications specific to the user. Process 1500 may then end at step 1514.

[0082] The above-described embodiments of the present invention are intended to be illustrative and not limiting, and the present invention is limited only by the claims that follow.

Claims

1. 1. A method for seamlessly authenticating a user of an electronic device, comprising: receiving input from a user using an input mechanism of the electronic device; detecting, with a sensor adjacent to the input mechanism, an identification of the user when the input is received; and authenticating the user based on the detected information.

2. The method of claim 1 further comprises: In response to the authentication, providing the user with access to restricted electronic device resources.

3. 3. The method of claim 2, wherein the limited electronic device resources are: The method includes at least one of an application, data associated with the application, and a data file.

4. The method of claim 1 further comprises: In response to the authenticating step, the method comprises providing a personalized display screen to the user.

5. The method of claim 1 , wherein the receiving step further comprises receiving an input to unlock the electronic device.

6. The method of claim 5 , wherein the input comprises dragging an option across a display.

7. 2. The method of claim 1, wherein the identification information is: The method includes at least one of a fingerprint, palm print, hand print, knuckle print, blood vessel pattern, retinal pattern, iris pattern, ear canal pattern, and DNA sequence.

8. The method of claim 1 , wherein the sensor is integrated into the input mechanism.

9. The method of claim 8 , wherein the sensor is integrated into a portion of a touchscreen.

10. 9. The method of claim 8, wherein the sensor is integrated into at least one of a keyboard, a button, a mouse, a touchpad, and an electronic device housing adjacent the input mechanism.

11. 1. A method for authenticating a user of an electronic device, comprising: determining that the user is aligned with the sensing elements of the device without guiding the user to align with the sensing elements; detecting a biometric attribute of the user using the sensing element in response to the determining step; and in response to said detecting step, authenticating said user.

12. The method of claim 11 , wherein the determining step further comprises determining that the user is within a field of view of the sensor.

13. 12. The method of claim 11, wherein the detecting step further comprises detecting at least one of a facial feature of the user and an eye feature of the user.

14. The method of claim 11 further comprises: not providing an indication of the sensing element to the user.

15. 1. An electronic device for seamlessly authenticating a user, comprising: an input mechanism for receiving input from a user; a sensing element that detects a distinguishing feature of the user when the input is received; a processor for authenticating the user based on the detected identifying characteristic.

16. 16. The electronic device of claim 15, wherein the sensing element is built into the input mechanism.

17. 16. The electronic device of claim 15, wherein the sensing element is positioned such that a field of view of the sensing element captures at least one identifying feature of a user providing input to the input mechanism.

18. 16. The electronic device of claim 15, wherein the input mechanism comprises at least one of a keyboard, a button, a mouse, a touchpad, a touchscreen, and a scroll wheel.

19. 16. The electronic device of claim 15, wherein the sensing element detects at least one of a skin characteristic of the user and a subcutaneous characteristic of the user.

20. 1. An electronic device for authenticating a user without requiring user input, comprising: a display providing a screen for at least one application available from said electronic device; a sensor that detects an attribute specific to the user when the user faces the display; and a process, said process comprising: receiving the detected characteristic attribute; comparing the detected distinctive attributes to a library of attributes associated with authorized users; and an electronic device that provides access to a restricted resource in response to determining that the detected attribute matches an attribute of the library.

21. 21. The electronic device of claim 20, wherein the sensor further detects an attribute of the user's skin.

22. 22. The electronic device of claim 21, wherein the sensor is located on a surface of the device opposite a surface of the display.

23. 21. The electronic device of claim 20, wherein the sensor further detects attributes of at least one of the user's face and the user's eyes.

24. 24. The electronic device of claim 23, wherein the sensor is located on a surface of the device that includes the display.

25. 21. The electronic device of claim 20, wherein the sensor automatically detects the distinctive attribute upon detecting the user within a sensing area of ​​the sensor.

26. 1. A computer-readable medium for authenticating a user of an electronic device, comprising: receiving input from a user using an input mechanism of the electronic device; detecting an identity of the user when receiving the input using a sensor adjacent to the input mechanism; A computer-readable medium having computer program logic recorded thereon for authenticating the user based on the detected information.

27. 1. A method for authenticating a user of an electronic device, comprising: displaying a plurality of selectable options; receiving a user selection of a subset of the selectable options; determining that the selectable options included in the selected subset share a common attribute; and in response to said determining step, authenticating said user.

28. The method of claim 27 further comprises: comparing the common attributes with attributes of selectable options stored in a memory; and in response to determining that the common attribute matches the attribute stored in the memory, authenticating.

29. The method of claim 27 further comprises: detecting that all selectable options having the selectable option attributes stored in memory have been selected; and in response to said detecting step, authenticating.

30. 28. The method of claim 27, wherein the attributes include at least one of size, color, outline, hatch pattern, shape, alignment with other options, position relative to other options, and source.

31. 28. The method of claim 27, wherein said receiving step further comprises simultaneously receiving at least some of the selectable options included in said subset.

32. 28. The method of claim 27, wherein said receiving step further comprises the step of continuously receiving at least some of the selectable options included in said subset.

33. The method of claim 27 further comprises: In response to the authenticating step, providing access to a restricted resource.

34. 28. The method of claim 27, wherein the subset of selectable options includes a range of four to eight selectable options.

35. 1. A method for authenticating a user of an electronic device, comprising: receiving a plurality of inputs from the user; determining a delay between successive inputs; determining that the identified delay matches a delay stored in a library; and in response to said determining step, authenticating said user.

36. 36. The method of claim 35, wherein said receiving step further comprises receiving said plurality of inputs using an input mechanism.

37. 36. The method of claim 35, wherein the receiving step further comprises detecting motion of the electronic device.

38. 36. The method of claim 35, wherein the receiving step further comprises detecting an impact to the electronic device using a sensor.

39. 36. The method of claim 35, further comprising: detecting the received inputs; determining that the detected plurality of inputs match inputs stored in the library.

40. The method of claim 35 further comprises: determining whether the determined delay is within an acceptable range of delays stored in the library.

41. 36. The method of claim 35, wherein at least one delay is zero.

42. 1. An electronic device for authenticating a user based on a pattern of input, comprising: a sensor for detecting a plurality of inputs; a processor, the processor comprising: identifying a pattern of the detected plurality of inputs; determining that the pattern matches a pattern stored in a library; The electronic device authenticates the user in response to the determination.

43. 43. The electronic device of claim 42, wherein the processor is further configured to identify a visual pattern of the input.

44. 43. The electronic device of claim 42, wherein the sensor includes at least one of an input mechanism, an accelerometer, and a gyroscope.

45. The electronic device of claim 42 further comprises: a display operable to display a screen; The processor further causes the display to display a plurality of selectable options.

46. 46. ​​The electronic device of claim 45, wherein the sensor further detects a selection of a subset of the displayed plurality of selectable options.

47. 47. The electronic device of claim 46, wherein the processor further identifies common attributes associated with selectable options included in the selected subset.

48. 48. The electronic device of claim 47, wherein the attributes include at least one of size, color, outline, hatch pattern, shape, alignment with other options, position relative to other options, and source.

49. 43. The electronic device of claim 42, wherein the processor is further configured to identify a temporal pattern of the input.

50. 50. The electronic device of claim 49, wherein the processor is further configured to detect a time delay between successive ones of the detected inputs.

51. 1. A computer-readable medium for authenticating a user of an electronic device, comprising: receiving a user selection of a subset of the selectable options; identifying a pattern of selectable options included in the received subset; determining that the identified pattern matches a pattern stored in a library; A computer-readable medium having computer program logic recorded thereon for authenticating the user in response to the determination.

Images